[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2283
  • Last Modified:

Need site to site vpn help

Hi, I am trying to get a simple vpn tunnel up and running between two sites. One end uses a juniper netscreen firewall and the other end is a pfsense software based firewall. Should these two devices have any trouble talking? I feel like I am 85% complete but am missing some steps. This is my first attempt of a vpn tunnel. If anyone has done this between these two devices and has any input or patience to work with me that would be greatly appreciated.

Thanks!
0
System
Asked:
System
  • 2
2 Solutions
 
SystemAuthor Commented:
Hi,
  It appears my link is actually up but I can't ping between the subnets. Do I have to do routing and so forth to make this happen? I assume by providing the local subnets during the setup that I wouldn't need to touch the routing?

Thanks
0
 
Roachy1979Commented:
You will need to specify the local and remote network address range on both of the devices, so that the gateway on each network knows to push traffic down the VPN tunnel for the rmeote networks rather than just trying to resolve on the www.

See this page here for an explaination of the fields on the pfsense....although I'm not experienced with the juniper, it looks like you've done the hard bit if you've got the connection negotiated :)  It's all downhill from here....

http://doc.pfsense.org/index.php/VPN_Capability_IPSec#Site_to_Site_VPN_Explained
0
 
SysExpertCommented:
ALso note that the tunnel should work OK if  you are not filtering traffic, and both ends are fixed IPs.

If you have one end DHCP, then it is the side that needs to initiate traffic ( ping the other side )


I hope this helps !
0
 
SystemAuthor Commented:
Hi guys,
   Both ends are static IP. I think the problem is with the juniper. It says the VPN link is up but the tunnel interface is down. Not sure how that can be
0

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now